Testing CORS OPTIONS request with curl